Download Oracle Database 12c: Advanced PL-SQL.1z0-148.ActualTests.2018-10-06.47q.tqb

Vendor:	Oracle
Exam Code:	1z0-148
Exam Name:	Oracle Database 12c: Advanced PL/SQL
Date:	Oct 06, 2018
File Size:	3 MB

Download Exam

How to open VCEX files?

Files with VCEX extension can be opened by ProfExam Simulator.

Download
ProfExam Simulator

Purchase
Coupon: EXAM_HUB

Discount: 20%

Demo Questions

You are designing and developing a complex database application built using many dynamic SQL statements. Which option could expose your code to SQL injection attacks?

Using bind variables instead of directly concatenating parameters into dynamic SQL statements
Using automated tools to generate code
Not validating parameters which are concatenated into dynamic SQL statements
Validating parameters before concatenating them into dynamic SQL statements
Having excess database privileges

Correct answer: A

Explanation:

Reference: https://docs.oracle.com/database/121/LNPLS/dynamic.htm#LNPLS645

Examine this code executed as SYS:

Examine this code executed as SPIDER and the error message received upon execution:

What is the reason for this error?

The procedure needs to be granted the DYNAMIC_TABLE_ROLE role.
The EXECUTE IMMEDIATE clause is not supported with roles.
Privileges granted through roles are never in effect when running definer’s rights procedures.
The user SPIDER needs to be granted the CREATE TABLE privilege and the procedure needs to be granted the DYNAMIC_TABLE_ROLE.

Correct answer: C

Which codes executes successfully?

CREATE PACKAGE pkg AS
TYPE rec_typ IS RECORD (price NUMBER, inc_pct NUMBER);
PROCEDURE calc_price (price_rec IN OUT rec_typ);
END pkg;
/
CREATE PACAKGE BODY pkg AS
PROCEDURE calc_price (price_rec IN OUT rec_typ) AS
BEGIN
price_rec.price := price_rec.price + (price_rec.price * price_rec.inc_pct)/100;
END calc_price;
END pkg;
/
DECLARE
1_rec pkg. rec_typ;
BEGIN
1_rec_price :=100;
1_rec.inc_pct :=50;
EXECUTE IMMEDIATE ‘BEGIN pkg. calc_price (:rec); END;’ USING IN OUT 1_rec;
END;
CREATE PACKAGE pkg AS
TYPE rec_typ IS RECORD (price NUMBER, inc_pct NUMBER);
END pkg;
/
CREATE PROCEDURE calc_price (price_rec IN OUT pkg. rec_typ) AS
BEGIN
price_rec.price := price_rec.price + (price_rec.price * price_rec.inc_pct)/100;
END
/
DECLARE
1_rec pkg.rec_typ;
BEGIN
EXECUTE IMMEDIATE ‘BEGIN calc_price (:rec); END;’ USING IN OUT 1_rec (100, 50);
END;
CREATE PACKAGE pkg AS
TYPE rec_typ IS RECORD (price NUMBER, inc_pct NUMBER);
END pkg;
/
CREATE PROCEDURE calc_price (price_rec IN OUT pkg. rec_typ) AS
BEGIN
price_rec.price := price_rec.price + (price_rec.price * price_rec.inc_pct)/100;
END ;
/
DECLARE
1_rec pkg. rec_typ;
BEGIN
1_rec_price :=100;
1_rec.inc_pct :=50;
EXECUTE IMMEDIATE ‘BEGIN calc_price (1_rec); END;’;
END;
DECLARE
TYPE rec_typ IS RECORD (price NUMBER, inc_pct NUMBER);
1_rec rec-typ;
PROCEDURE calc_price (price_rec IN OUT rec_typ) AS
BEGIN
price_rec.price := price-rec.price+ (price_rec.price * price_rec.inc_pct)/100;
END;
BEGIN
1_rec_price :=100;
1_rec.inc_pct :=50;
EXECUTE IMMEDIATE ‘BEGIN calc_price (:rec); END;’ USING IN OUT 1_rec;
END;